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Metfaodand device%r protectfr ff data communication ^ »v ^ L 

The invention relates to a method and a device for protecting data communication 
traffic through a communication link between a first communicaticm station and a second 
5 communication station, in which the data is dispatched according to a data protocol from the 
second communication station to me first communication station, comprising the steps of (i) 
receiving the data from the second communication station in a data communication protection 
device and (ii) comparing the data protocol of the data with at least one standardised protocol in the 
data communication protection device. In particular, data communication links are protected 
which can be seized by third parties by means of public and/or private data and 
telecommunication infrastructure. 

Furthermore, the present invention relates to a data communication protection 
device arranged for protecting data communication traffic between a first communication station 
and a second communication station, data being dispatched according to a date protocol from the 
second communication station to the first communication station, the data communication 
protection device comprising memory means for storing data characteristics of at least one 
standardised protocol, the data communication protection device former being arranged for 
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which discloses a 

method for protecting data communication traffic between a first communication station and a 
second communication station, in which the data is dispatched according to a data protocol from 
the second to the first communication station, in which the data protocol is compared with at least 
one standardised protocol and data is forwarded to the first communication station only when the 
data protocol complies with the at least one standardised protocol. The disclosed method and 
25 system are directed to data networks, the network mtercormecting a number of stations and a 
network access controller. The network access controller is connected to me network and listens in 
on the data traffic on the network. The network access controller checks the content of each data 
package sent on the network and determines whether the packet is of an authorised type. It relies on 
control mechanisms present in the protocol that is being used in order to terminate confiscations 
30 between specific stations. It is disclosed that the network access controller 16 is not part of me 
physical path between communication stations. 

Appliances are found to an increasing extent on the market which are provided 
with an option which makes it possible to provide so-called remote service. This involves, 
in particular, installed fax equipment, network fax equipment, telephone modems, cable 
35 modems, combined fax/modem configurations, telephone sets, answering machines, 
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telephone exchanges, copying machines, washing chines and other domestic, iBdu^ 
appliances and operating appliances which can communicate with one another vxa the saul 
structures. This relates to appliances which are installed separately and also m 
combination with other equipment This remote service, also known as remote 
5 diagnostics- or "remote maintenance" has been developed in order to be able to dehver a 
flexible and cheap method of support to the (end) users of the equipment. 

Remote service, furthermore referred to as RDS ("Remote Diagnostics ) 
ma kes it possible to subject the respective appliance to an analysis via the ^d 
infiastractnre from the location of the supplier or another service point. In a number of 
10 cases, it is even possible for the service engineer to be able to carry out small repairs 
remotely. If it emerges that repair has nevertheless to be carried out at the location of the 
appliance, the respective maintenance engineer or technician can be sent out wxth the 
correct components. Specifically, it is already known via RDS what is wrong with the 
1 appliance and what measures have to be taken to remedy the fault. 

15 The functionality of RDS may comprise many advanced options: 

The reading-out of the various counter positions; when a service is necessary 
can be determined by interpreting the counter positions. 
The switchings and switehing-off of the visual and audible signals, for 
example, in the case of a fax machine; as a result it is possible to analyse the 
20 appliance remotely without disturbing the immediate environment. 

- The reading-out of a fax/telephone number list; in the event of an alteration of 
(service) telephone numbers, these can be altered remotely. 
The reading-out of a fax log; the log usually contains the error codes of the last 
fax messages sent and these can be used by the technical support for the 
^ 25 purpose of analysing the appliance. 

The manipulation of the fax memory; mis is intended to offer a final possibility 
for erasing the memory if this is not possible by means of the prescribed 
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The alteration of the configuration settings; as a service, the appliance can be 
configured remotely in accordance with the wishes of the client. 
The adding of connecting-through numbers; the service centre can then 
examine any damaged faxes itself and infer therefrom what the possible cause 
of the fault is. 
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Although the functionality mentioned is concentrated onfex machines, a comparable 
functionality may be present in the other equipment mentioned above. The RDS 
functionality can, in principle, comprise all the functionality which relates to operations 
concerning the memories (RAM, ROM, EEPROM) present in the appliance. 
5 Many manufacturers of data communication devices make use of so-called 

custom chip sets (standard integrated circuits produced in large numbers) or accommodate 
hardware produced in large numbers and delivered to many manufacturers in a separate 
housing. The specifications of the manufacturer will, in many cases, describe only the 
functions desired by the manufacturer. It is therefore possible that (RDS) functionality is 
10 present in custom chip sets or hardware which is not made known to the end user. 

In the modern information society, knowledge is power. Information is, of 
course, well protected by means of physical and organizational protection measures of all 
kinds. Documents may, for example, be seen only by a select group of individuals, after 
which they are securely stored in the safe. For the purpose of rapid decision-making and 
15 refreshing the information situation, consultation will often be made by telephone, in 
which case use is frequently made of the fax machine to transmit the documents to be 
discussed to one another. It is here that there is a weak point in the entire security chain. 
Essentially, the respective documents are made available to third parties, the intention 
being precisely to avoid that Said third parties, who possibly have direct business interests 
20 or operate in the world of information brokerage, may acquire possession of valuable 
information. This may take place even without the owner of the sensitive information even 
having any indication until it is too late. The industrial spy therefore appears to be very 
near at hand and works, it is to be noted, together with the individual who has protected his 
own information with every means. 
2 5 A fax machine has, for example, RDS functionality, whether this is known to 

the end user or not, and can thereby be manipulated by a third party. Said third party can 
ensure, for example, that the respective fax machine responds to certain fax numbers 
and/or fax identification numbers. During the transmission and/or reception of faxes 
from/to these fax numbers, the fax machine will transmit, for example, an additional copy 
30 to the fax number specified by said third party. The user of the fax machine does not, 
however, notice anything in this case because the visual and audible signals can be 
switched off, the so-called fax through-connection number does not have to figure in the 
list of fax through-connection numbers and even the fax log does not have to report this 
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peration. If necessary, a copy of the fax involved is traSSmitted only during the night 
hours when no-one is present in the company. 

In the case of a network fax or a modem fax incorporated in a network system 
within a company, it is conceivable that a third party obtains access via said fax or said 
5 modem to the network system. As a result, it might be possible also to extract information 
in the manner mentioned above from the network system, which is believed to be safe. 

The object of the present invention is to provide a method ana a device tor 
protecting data communication traffic in order to prevent third parties being able to make 
unnoticed use of functionality present in a communication station. 
10 According to the invention, the object is achieved by means of a method of the type 

defined in the introduction, characterized by the steps of (iii) providing the data 
communication protection device in the communication link, the data from the second 
communication station to the first communication station passing through the data communication 
protection device and (iv) forwarding data of which the data protocol complies with the at least one 
15 standardised protocol from the data communication protection device to the first communication 
station, and not forwarding data of which the data protocol does not comply with the at least one 
standardised protocol from the data communication protection device to the first communication 
station- 
Repetitions of commands, or certain combinations of commands, which each 
20 belong per se to the standardized protocol but do not lead to normal, effective data 
communication traffic, are deemed not to belong to the standardized protocol. Specifically, 
it is possible that such repetitions or combinations of commands are used to switch on 
certain RDS functionality. 

Before a fax machine, for example, can proceed to the reception and/or 
25 transmission of documents, the appliances at both ends of the communication link have to 
inform one another about the status they are in After this so-called "handshake" procedur , 
the information exchange is mutually adapted- Both appliances are now ready and will 
cany out the desired task. This procedure and the information exchange proceeds 
according to internationally specified standards, also referred to as protocols, which are 
30 specified in part in the so-called ISO, ETSI and ANSI standards or in the ITU regulations. 
Before, during or after the "handshake* procedure, a check can take place on the presence 
of certain RDS functionality. To use RDS functionality, a manufacturer will use protocols 
which are not (entirely) incorporated in the standards. This means that tile use of a so- 
called exotic protocol can indicate the use of RDS functionality. It indicates in any case 
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that the other party is not adhering to the standard protocols. The negation f the standard 
indicates that the link made is being used in a manner other than that which the user 
intended. 

As a result of using the method according to the invention, an attempt of a 
third party to switch on (concealed) RDS functionality from the outside will be 
unsuccessful, as a result of which the probability that information can leak out via the 
communication equipment used becomes substantially smaller,. 

Because, according to the invention, the data protocol is compared with 
standardized protocols, the method according to the invention can be used worldwide. 

In an embodiment of the method according to the invention, the user of a 
communication station is warned if it emerges during ihe comparison of the data protocol 
that the latter does not belong to a known standardized protocol- As a result, the user is 
warned of an attempt of a third party to manipulate his communication station, whereupon 

the user can take direct action. 

hi a further embodiment of the method according to the invention, the link is 
interrupted if it emerges during the comparison of the data protocol that the latter does not 
belong to a standardized protocol. This has the result that any attempt to manipulate the 
communication station by a third party will be unsuccessful. 

In a preferred embodiment of the method according to the invention, after 
20 ascertaining mat the data protocol does not belong to a certain standardized protocol, a data 
file containing data of the data communication traffic and the second communication 
station is prepared. As a result of recording said data, the user is enabled to obtain as 
complete a picture as possible of the user of the second communication station, after which 
appropriate measures can be taken, 
25 Another aspect of the invention provides a device suitable for carrying out 

the method according to the invention as defined in the preamble of claim 4. For this 
purpose, the device is farther provided with a first link for linking the data communication 
protection device to the first communication station, and a second link for linking the data 
wmmunication protection device to the second communication station, the data passing from the 
30 second communication station to the first communication station through the data communication 
protection device and comparison/forwarding means for forwarding data received through the 
second Knlc of which the data protocol complies with the at least one standardised protocol from the 
data communication protection device through the first link, and not forwarding data of which the 
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data protocol does^ot comply with the at least one stai^Klised protocol from the data 
communication protection device through the first link. 

With til device according to the invention, it is possible to use the 
abovementioned method in a data communicatioia environment An advantag of the 
5 device according to the invention is that the user can determine himself; regardless of the 
brand and type of appliance, whether RDS functionality is permitted. Because the device 
can be used separately from the local communication station, there is no need to pay 
attention to any RDS functionality present when purchasing the local communication 
station. 

10 As a result of the small number of components required, it is possible to 

manufacture the device in a compact, lightweight and robust form and to adapt it to the 
situation in which it is used. Furthermore, the operation and the connection of the device 
are simple. 

Preferably, the memory means are designed as a ROM memory- As a result, it 
15 is impossible for the contents of the memory means to be manipulated during use, but it is 
still simple to adapt the device to the latest standardized protocols by replacing the ROM 
memory. 

In an embodiment of the device, the device furthermore comprises warning 
means. If data is detected of which the data protocol does not comply with the at least one 
20 standardized protocol, the user is warned, for example by visual and/or audible warning 
means. As a result, the user will always be warned if an attempt is made to manipulate the 
first communication station, even if an attempt is made in these circumstances to switch off 
indications of the first communication station* 

A further embodiment of the device according to the invention comprises 
25 display means linked to the comparison/forwarding means, the 
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display means displaying data relating to the data communication traf f xc 
aod the sec nd communication station which are stored after it has 
emerged during the comparison of the data protocol that the latter does 
not comply with the at least one standardized protocol. This can be 
implemented, for example, as a display screen on the device itself. 

As an addition, the device can be provided, in a further 
embodiment, with input means linked to the comparison/forwarding means 
for inputting commands relating to the display of the data. 

An alternative embodiment of the invention is to provide xt 
with interface means instead of the display means and/or the input means. 
Said interface means ensure the exchange of data relating to the data 
communication traffic and the second communication station with an 
external processing device, which data are stored after it has emerged 
during the comparison of the data protocol that the latter does not 
15 comply with the at least one standardized protocol. Said processing 

device may be, for example, a computer with which the data are processed 
further and can be displayed. 

By means of the display of said data, the user is enabled to 
obtain as complete a picture as possible of the attempt to manipulate the 
20 local communication station, after which appropriate measures can be 

taken. D^l^o^ ^ TWfc.'Sfcfcrfft 066 

0, Acco^diTg to ^ embodip.ent of the invention, the device can be 

integrated with the local communication station. 

The method and the device according to the invention will now 
25 be explained further by reference to the drawings. 

Figure 1 shows a diagram of an embodiment according to the 

invention; and 

Figure 2 shows a flow chart of the method according to the 

invention, c£j&£^S*& O^W^ ?Z-^eU&5> e^&OZSX3^^nS 

Figure 1 shows a diagram of a preferred embodiment accordxng to 
the invention in which the device 10 for protecting data communication 
traffic is linked to a first communication station 11 and a second 
communication station 12. The device 10 comprises comparison/forwarding 
means 15 which can communicate during operation both with the first 
communication station 11 and the second communication station 12. The 
device 10 furthermore comprises memory means 14 linked to the 
comparison/forwarding means 15- In the preferred embodiment of the 
invention shown, the device 10 furthermore comprises warning means 16, 
display means 17 and input means 18, all linked to the 
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comparison/forwarding means 15 . The communication stations 11 and 12 may 
be, for example, fax or copying machines provided with an RDS 
functionality - 

In the memory means 14, the characteristics of the data 
5 communication are stored according to at least one standardized protocol. 
The comparison/forwarding means 15 serve to compare the data protocol of 
data which the second communication station wishes to dispatch to the 
first communication station U and to forward only data of which the data 
protocol complies with the at least one standardized protocol to the 
10 local communication station 11- 

In the preferred embodiment shown, the device 10 also comprises 
warning means 16, which give a warning after it has emerged during the 
comparison of the data protocol that the latter does not comply with the 
at least one standardized protocol. The figure indicates that the warning 
15 means 16 are implemented as a warning lamp. However, it is possible to 
use other visual or audible warning means for this purpose. 

In the preferred embodiment of the invention shown, the device 
10 also comprises display means 17 for displaying data relating to the 
data communication traffic and the second communication station 12 which 
20 have been stored after it has emerged during the comparison of the data 
protocol that the latter does not comply with the at least one 
standardized protocol. Furthermore, the device comprises input means 18 
for inputting commands relating to the display of the data- It is 
possible, for example, to input commands to display only a certain 
25 portion of the data on the display means. 

In an embodiment of the invention not shown, the device 10 
comprises, instead of the display means 17 and input means 18, interface 
means which can be linked to an external processing device. This 
processing device may be. for example, a computer with which the data can 
30 be processed further, stored and displayed. 

Figure 2 shows the flow chart of the method according to the 
invention. The method begins with the reception of data from the second 
communication station 12 in block 1. In decision block 2. the data 
protocol of the data received in block 1 is compared with the 
35 standardized prot col. If the data protocol complies with the at least 
one standardized protocol, the data is forwarded to the first 
communication station 11 in forwarding block 3- The method then returns 
to block 1 to check the further data received. 

If the data protocol does not comply with th at least one 
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standardised protocol, th method continues the procedure in warning 
olock *. in which the user is warned. The following step in the procedure 
comprises the interrupt block 6. in which the link to the second com- 
munication station is interrupted. In a preferred embodiment of the 
me thod according to the invention, in block 5. a data file is stored « 
which data of the data communication traffic and the- second communication 
station are stored in parallel with warning block * and interrupt block 

6 * Using the method and device shown in the figures for protecting 

data communication traffic, an attempt of a third party to switch on 
(concealed) functionality from the outside will be unsuccessful, as a 
result of which the probability that information can leak out vxa the 
communication equipment used becomes appreciably smaller. 

As a result of .warning the user and recording data relating to 
the data communication traffic and the second communication station 12. 
the user is enabled to obtain as complete a picture as possible of the 
user of the second communication station, after which appropriate 

measures can be taken* 

An advantage of the device described is that the user can 
20 determine himself, regardless of the brand and type of appliance whether 
RDS functionality is permitted. Because the device can be used separately 
from the first communication .station, there is no need to pay attention 
to any RDS functionality present when purchasing the first communication 
station. Of course, the device 10 can also be physically incorporated in 
25 the first communication station 11. In that case, the 

comparison/forwarding means 15 can form an integral component of a 
processor present in the first communication station 11. 

As a result of the comparison of the data protocol of the 
received data with standardized protocols, the method according to the 
30 invention can be used worldwide. 

As a result of the small number of components required, it is 
possible to manufacture the device in a compact, lightweight and robust 
form and to adapt it to the situation in which it is used. Furthermore, 
the operation and the connection of the device are simple. 
35 If the memory means are designed as a ROM memory, it is 

impossible for the contents of the memory means 14 to be manipulated 
during use, but it is still simple to adapt the devic to the latest 
standardised protocols by means of replacing the ROM memory. 

Although the device has been described for the protection of 
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data communication traffic between two communication stations, it is, of 
course, also possible to protect the data communication traffic between a 
plurality of communication stations, such as, for example, in a network 
envii^onment » 



